Upcoming
Vulnerabilities that other sources know about before their CVE record appears in cvelistV5. Data from the GitHub Advisory Database (CC BY 4.0), OSV.dev sources and the Zero Day Initiative; see sources and licenses.
CVE IDs that a GitHub advisory, an OSV.dev record or a ZDI advisory already names, but that cvelistV5 doesn't contain yet: usually reserved and about to be published. Each badge links to the source's record.
234 CVE IDs · page 3 of 5
| CVE ID | First seen | Severity | Affects | Title | Sources |
|---|---|---|---|---|---|
| CVE-2025-71414 | 2026-09-10 | High 7.8 | ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability | ZDI | |
| CVE-2026-59185 | 2026-09-09 | High 8.5 | github.com/identrail/identrail | Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without... | GitHub advisory OSV.dev |
| CVE-2026-59179 | 2026-09-09 | High 8.3 | @openhop/server | @openhop/server: Path Traversal in Flow ID File Operations | GitHub advisory |
| CVE-2026-59177 | 2026-09-09 | High 8.8 | esphome-device-builder | ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces | GitHub advisory OSV.dev |
| CVE-2026-59176 | 2026-09-09 | High 7.8 | functype-mcp-server | functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import | GitHub advisory |
| CVE-2026-59172 | 2026-09-09 | High 7.8 | github.com/candid82/joker | Joker linter executed project-local .jokerd/linter.* files during linting | GitHub advisory OSV.dev |
| CVE-2026-59158 | 2026-09-09 | High 7.5 | nuxt-ollama | Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients | GitHub advisory |
| CVE-2025-58363 | 2026-09-09 | Medium 5.5 | github.com/lf-edge/ekuiper/v2 | LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint | GitHub advisory OSV.dev |
| CVE-2025-24979 | 2026-09-09 | Medium 5.5 | github.com/lf-edge/ekuiper/v2 | LF Edge eKuiper: SSRF in External Service | GitHub advisory OSV.dev |
| CVE-2025-24978 | 2026-09-09 | Low 3.7 | github.com/lf-edge/ekuiper/v2 | LF Edge eKuiper: Self-XSS in External Service Creation | GitHub advisory OSV.dev |
| CVE-2026-12876 | 2026-09-02 | Medium 6.9 | nltk | NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars | GitHub advisory OSV.dev |
| CVE-2026-44701 | 2026-08-26 | Low 3.5 | devcode-it/openstamanager | OpenSTAManager has HTML Injection in modules/utenti/edit.php | GitHub advisory |
| CVE-2026-63202 | 2026-08-20 | High 7.5 | io.netty.incubator:netty-incubator-codec-bhttp | netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding | GitHub advisory |
| CVE-2026-61827 | 2026-08-20 | High 8.7 | io.netty.incubator:netty-incubator-codec-bhttp | netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields | GitHub advisory |
| CVE-2026-63124 | 2026-08-20 | High 7.5 | io.netty.incubator:netty-incubator-codec-bhttp | netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary | GitHub advisory |
| CVE-2026-61799 | 2026-08-20 | Medium 5.3 | io.netty.incubator:netty-incubator-codec-bhttp | netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash | GitHub advisory |
| CVE-2026-61798 | 2026-08-20 | High 8.1 | io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl | netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages | GitHub advisory |
| CVE-2026-54162 | 2026-08-20 | Medium 4.7 | github.com/alexandre-daubois/ember | Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI | GitHub advisory OSV.dev |
| CVE-2024-45747 | 2026-08-19 | High 7.2 | org.geoserver:gs-main | GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates | GitHub advisory |
| CVE-2026-35511 | 2026-08-14 | High 8.7 | github.com/authorizerdev/authorizer | Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts | GitHub advisory OSV.dev |
| CVE-2026-16633 | 2026-08-06 | High 8.6 | pdfjs-dist | PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF | GitHub advisory |
| CVE-2016-1000305 | 2026-07-31 | Medium 6.9 | guard-livereload | guard-livereload has a directory traversal vulnerability | GitHub advisory |
| CVE-2026-12075 | 2026-07-31 | High 8.6 | nltk | Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download /... | GitHub advisory OSV.dev |
| CVE-2026-12061 | 2026-07-31 | High 7.5 | nltk | Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex | GitHub advisory OSV.dev |
| CVE-2026-12072 | 2026-07-31 | High 7.5 | nltk | Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the... | GitHub advisory OSV.dev |
| CVE-2026-12074 | 2026-07-31 | High 7.5 | nltk | Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file... | GitHub advisory OSV.dev |
| CVE-2023-37465 | 2026-07-27 | Medium 6.5 | org.xwiki.contrib:discussions-server | org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages | GitHub advisory |
| CVE-2026-62944 | 2026-07-15 | High 8.6 | mantisbt/mantisbt | MantisBT: Stored XSS in print_all_bug_page_word.php | GitHub advisory |
| CVE-2026-52883 | 2026-07-15 | Medium 5.3 | mantisbt/mantisbt | MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs | GitHub advisory |
| CVE-2026-52882 | 2026-07-15 | Medium 5.3 | mantisbt/mantisbt | MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters | GitHub advisory |
| CVE-2026-52881 | 2026-07-15 | Critical 9.2 | mantisbt/mantisbt | MantisBT: Reflected XSS in admin/install.php via unescaped printf | GitHub advisory |
| CVE-2026-52847 | 2026-07-15 | Critical 9.2 | mantisbt/mantisbt | MantisBT: Reflected XSS in admin/install.php | GitHub advisory |
| CVE-2026-49280 | 2026-07-15 | Medium 5.3 | mantisbt/mantisbt | MantisBT: REST API unauthorized Issue status change | GitHub advisory |
| CVE-2026-49273 | 2026-07-15 | High 8.6 | mantisbt/mantisbt | MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php | GitHub advisory |
| CVE-2026-47142 | 2026-07-15 | High 8.5 | mantisbt/mantisbt | MantisBT: SQL Injection via history_order Configuration Value | GitHub advisory |
| CVE-2026-45710 | 2026-07-14 | Low 3.5 | facturascripts/facturascripts | FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of... | GitHub advisory |
| CVE-2026-45263 | 2026-07-14 | High 8.0 | facturascripts/facturascripts | FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that... | GitHub advisory |
| CVE-2026-45693 | 2026-07-14 | High 7.5 | facturascripts/facturascripts | FacturaScripts: Unauthenticated Path Traversal in Static File Controllers Reads Private MyFiles Documents | GitHub advisory |
| CVE-2026-45262 | 2026-07-14 | Critical 9.9 | facturascripts/facturascripts | FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass... | GitHub advisory |
| CVE-2026-47677 | 2026-07-13 | Critical 9.3 | facturascripts/facturascripts | FacturaScripts: Account takeover of any 2FA-enabled user | GitHub advisory |
| CVE-2026-55372 | 2026-07-13 | High 7.2 | nukeviet/nukeviet | NukeViet: Pre-authentication SSRF via X-Forwarded-Host | GitHub advisory |
| CVE-2026-54065 | 2026-07-13 | High 8.7 | nukeviet/nukeviet | NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function | GitHub advisory |
| CVE-2026-54064 | 2026-07-13 | High 8.7 | nukeviet/nukeviet | NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module | GitHub advisory |
| CVE-2026-49259 | 2026-07-13 | High 8.7 | nukeviet/nukeviet | NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | GitHub advisory |
| CVE-2026-48118 | 2026-07-13 | High 8.2 | nukeviet/nukeviet | NukeViet: Unauthenticated Reflected XSS in Comment Module | GitHub advisory |
| CVE-2026-45016 | 2026-07-07 | Medium 6.5 | egroupware/egroupware | EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose | GitHub advisory |
| CVE-2026-46487 | 2026-07-01 | High 7.5 | org.geonetwork-opensource:geonetwork | GeoNetwork has ACL bypass on Elasticsearch search when request body omits query field | GitHub advisory |
| CVE-2026-39379 | 2026-07-01 | High 7.1 | org.geonetwork-opensource:geonetwork | GeoNetwork has reflected XSS through client-side template injection | GitHub advisory |
| CVE-2026-46560 | 2026-06-25 | High 7.5 | org.openidentityplatform.openam:openam-radius | OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing | GitHub advisory |
| CVE-2026-45049 | 2026-06-23 | High 8.3 | org.openidentityplatform.openam:openam-federation | OpenAM Unauthenticated Session Hijacking via Information Exposure in CDCServlet | GitHub advisory |
Machine-readable: /api/upcoming · /api/upcoming/reported